Maintain Risk Management Framework artifacts for DevSecOps pipeline inheritance of NIST SP 800-53 controls.
Complete and validate STIG/SRG checklists quarterly and provide monthly application STIG status reports.
Evaluate program risks, document mitigation strategies, and recommend courses of action to ensure continuous ATO compliance.
DecisionPoint is a company providing cloud services and DevSecOps solutions, supporting ARTRANS AWS environments. It is a regular full-time employer fostering a culture of security and compliance, with an active Secret clearance required for this role.
Review and threat model AI-powered product features, LLM integrations, and agentic workflows before launch.
Build reusable AI security primitives like guardrails, scanners, and policy checks to secure AI development.
Design security tooling to detect and prevent prompt injection, jailbreaks, and data leakage in AI systems.
Reddit is a community of communities built on shared interests, passion, and trust, hosting open conversations. With over 100,000 active communities and 126 million daily active users, it is one of the largest sources of information online.
Perform offensive security assessments on cloud infrastructure, web applications, APIs, and traditional networks for clients across various industries.
Develop detailed penetration testing documentation and collaborate with teams to integrate security into CI/CD pipelines.
Contribute to building a new offensive security service line within a top-rated CPA and advisory firm.
Aprio is a top 20 CPA-led advisory firm serving fast-growing industries with expertise in assurance, tax, and advisory services. The firm has over 3,200 team members across 40+ offices globally, and is recognized as a Best Place to Work with a collaborative culture.
Analyze, investigate, document, and report on security alerts or potential incidents in customer environments.
Process security investigation cases thoroughly and timely, and serve as an incident coordinator for urgent response and remediation.
Provide continuous feedback on process improvements and stay up-to-date on security training and emerging threats.
CyberSheath is a rapidly growing managed security services provider focused on cybersecurity for the Defense Industrial Base. They have a small but expanding team and emphasize a fully remote work culture.
Protect on-premise and cloud infrastructure, detect and respond to advanced threats, and improve security posture through risk analysis and vulnerability management.
Manage and optimize security tools like SIEM, EDR, and IDS/IPS, and perform proactive threat hunting to anticipate new attack techniques.
Assess security controls for compliance, analyze threat trends, and participate in infrastructure initiatives to adhere to industry best practices.
Clear Capital is a national real estate analytics, data solutions, and valuation technology company. Since 2001, the company has focused on building confidence in real estate decisions, with a team that values integrity, kindness, and attention to detail.
Work cross-functionally to design, build, and operate solutions that automate and improve security capabilities.
Lead incident response efforts, analyze security trends, and refine security documentation like policies and standards.
Mentor junior engineers and coach team members to drive security outcomes across the organization.
Aledade is a public benefit corporation that empowers independent primary care practices through value-based care, helping them deliver better patient outcomes while thriving financially. Founded in 2014, the company has grown to become the largest network of independent primary care in the US, fostering a collaborative, inclusive, and remote-first culture.
Participate in team exercises to identify potential security risks, including threat modeling and tabletop scenarios.
Plan projects to address prioritized risks and coordinate with cross-functional stakeholders to execute them.
Partner with engineering teams to architect secure software and build a strong security culture.
Vanta's mission is to help businesses earn and prove trust by enabling continuous security monitoring and verification. The company has a kind and talented team, and many have been successful without prior security experience.
Oversee global 24/7 SOC operations monitoring ~3 million endpoints, including incident response and performance metrics.
Recruit, mentor, and train SOC analysts, develop career paths, and deliver ongoing training.
Identify and implement automation opportunities to reduce manual workload and improve efficiency.
Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers and internal IT organizations worldwide. Backed by Insight Partners, Kaseya supports customers in over 20 countries and manages over 15 million endpoints; the culture is centered around innovation, accountability, and results.
Lead daily SOC operations and manage alert and incident response workflows.
Coach and develop SOC staff, conduct 1-on-1s, and manage shift schedules.
Drive continuous improvement through QA reviews, playbook enforcement, and KPI reporting.
CTS delivers comprehensive IT solutions to mission-driven organizations, specializing in nonprofits and educational institutions. With 90+ employees across the US and several other countries, the company fosters a culture of growth, collaboration, and innovation.
Own and manage POA&M lifecycle activities, including tracking findings, coordinating remediation, and maintaining audit-ready documentation.
Support FISMA compliance programs with evidence collection, continuous monitoring, and coordination with system owners and ISSOs/ISSMs.
Develop operational reporting for leadership and government stakeholders, translating compliance and operational data into actionable insights.
Aquia is a Veteran-founded digital services firm that helps the government modernize and secure its systems and processes. Named the “#1 Best Remote Startup to Work For in 2025” by Built In and a certified “Great Place to Work” for five years in a row, we prioritize outcomes over outputs.